oh-my-super-agent 0.1.0

package/dist/src/scheduler/minute.js

@@ -0,0 +1,441 @@
+import { assertRunLedger, } from "../audit/run-ledger.js";
+import { assertRuntimeEventBus, } from "../events/bus.js";
+import { assertOutboxProcessor, } from "../outbox/processor.js";
+import { assertOutboxStore } from "../outbox/store.js";
+import { canonicalTimestamp } from "../queue/model.js";
+import { projectNativeHook } from "../hooks/native.js";
+import { createStableId } from "../runtime/stable-id.js";
+import { assertQuotaObservationStore, } from "../runtime/quota.js";
+import { assertSessionRegistry, } from "../sessions/registry.js";
+import { appendRunAuditEvent, assertRunCurrentAuthority, assertRunManifestLedgerBinding, assertRunTicketAdmission, readRunManifest, withRunControllerAuthority, } from "../runs/controller.js";
+import { assertTicketQueueStore, createTicketLifecycleService, } from "../tickets/store.js";
+const RESUME_CONSUMER = "resume-reconciler";
+const HEARTBEAT_CONSUMER = "run-heartbeat-reconciler";
+const SESSION_HEARTBEAT_MS = 15 * 60 * 1_000;
+const MAX_RESUME_LATENCY_MS = 60 * 1_000;
+export async function reconcileMinute(options) {
+    assertTicketQueueStore(options.queue);
+    const captured = {
+        at: options.at,
+        bus: options.bus,
+        processor: options.processor,
+        outbox: options.outbox,
+        queue: options.queue,
+        lifecycle: createTicketLifecycleService(options.queue),
+        sessions: options.sessions,
+        quota: options.quota,
+        auditLedger: options.auditLedger,
+        packageRoot: options.packageRoot,
+        configRoot: options.configRoot,
+        stateRoot: options.stateRoot,
+    };
+    assertRuntimeEventBus(captured.bus);
+    assertOutboxProcessor(captured.processor);
+    assertOutboxStore(captured.outbox);
+    assertSessionRegistry(captured.sessions);
+    assertQuotaObservationStore(captured.quota);
+    assertRunLedger(captured.auditLedger);
+    const at = canonicalTimestamp(captured.at, "minute reconcile timestamp");
+    const tickAt = minuteBucket(at);
+    const emitted = [];
+    const processed = [];
+    const quotaBlocked = [];
+    const overdue = [];
+    const failedEvents = [];
+    const supersededEvents = [];
+    const failedTickets = [];
+    const auditConflicts = [];
+    const pendingNativeHooks = [...captured.bus.pending("native-hook-projector", "native-hook-observed")]
+        .sort(compareNativeHookEvents);
+    for (const event of pendingNativeHooks) {
+        try {
+            await projectNativeHook({
+                eventId: event.event_id,
+                processedAt: at,
+                bus: captured.bus,
+                processor: captured.processor,
+                sessions: captured.sessions,
+                quota: captured.quota,
+                queue: captured.queue,
+                packageRoot: captured.packageRoot,
+                configRoot: captured.configRoot,
+                stateRoot: captured.stateRoot,
+                auditLedger: captured.auditLedger,
+            });
+            processed.push(event.event_id);
+        }
+        catch {
+            failedEvents.push(event.event_id);
+        }
+    }
+    for (const event of captured.bus.pending(RESUME_CONSUMER, "ticket-resume-due")) {
+        try {
+            await processResumeEvent(event, at, captured);
+            processed.push(event.event_id);
+        }
+        catch {
+            failedEvents.push(event.event_id);
+        }
+    }
+    for (const event of captured.bus.pending(HEARTBEAT_CONSUMER, "run-heartbeat-due")) {
+        try {
+            await processHeartbeatEvent(event, at, captured);
+            processed.push(event.event_id);
+        }
+        catch {
+            try {
+                if (heartbeatEventIsSuperseded(event, captured.auditLedger)) {
+                    await acknowledgeHeartbeatSuperseded(event, at, captured.processor);
+                    supersededEvents.push(event.event_id);
+                }
+                else {
+                    failedEvents.push(event.event_id);
+                }
+            }
+            catch {
+                failedEvents.push(event.event_id);
+            }
+        }
+    }
+    const activeAuditRuns = captured.auditLedger.listRunIds().flatMap((runId) => {
+        try {
+            const manifest = readRunManifest(captured.packageRoot, captured.stateRoot, runId);
+            assertRunCurrentAuthority(manifest, captured.configRoot);
+            assertRunManifestLedgerBinding(captured.auditLedger, manifest);
+            const head = captured.auditLedger.head(runId);
+            if (!head)
+                return [];
+            const entry = captured.auditLedger.read(head);
+            if (entry.provenance_class !== "audit")
+                return [];
+            return captured.auditLedger.deriveMetrics(head).status === "running" ? [{ head, entry }] : [];
+        }
+        catch {
+            auditConflicts.push(runId);
+            return [];
+        }
+    });
+    if (activeAuditRuns.length > 1)
+        auditConflicts.push(...activeAuditRuns.map((run) => run.entry.run_id));
+    const activeAuditRun = activeAuditRuns[0];
+    if (activeAuditRun && activeAuditRuns.length === 1 && auditConflicts.length === 0) {
+        const alreadyRecorded = captured.auditLedger.list(activeAuditRun.entry.run_id).some((entry) => entry.entry_kind === "heartbeat" && entry.payload.scheduled_at === tickAt);
+        if (!alreadyRecorded) {
+            const published = captured.bus.publish("run-heartbeat-due", {
+                sourceId: activeAuditRun.entry.run_id,
+                sourceVersion: activeAuditRun.head.sequence,
+                dedupeKey: `heartbeat-${Date.parse(tickAt)}`,
+                occurredAt: tickAt,
+            }, {
+                run_id: activeAuditRun.entry.run_id,
+                expected_head_sha256: activeAuditRun.head.sha256,
+                emitted_at: tickAt,
+            });
+            emitted.push(published.event.event_id);
+            try {
+                await processHeartbeatEvent(published.event, at, captured);
+                processed.push(published.event.event_id);
+            }
+            catch {
+                failedEvents.push(published.event.event_id);
+            }
+        }
+    }
+    const parked = captured.queue.list()
+        .filter((record) => record.state === "parked")
+        .sort((left, right) => String(left.record_id).localeCompare(String(right.record_id)));
+    for (const ticket of parked) {
+        const dueAt = ticket.payload.resume_at;
+        const resumeGate = ticket.payload.resume_gate;
+        if (dueAt === null || resumeGate === null || Date.parse(dueAt) > Date.parse(at))
+            continue;
+        const observedLatencyMs = Date.parse(at) - Date.parse(dueAt);
+        if (observedLatencyMs > MAX_RESUME_LATENCY_MS)
+            overdue.push(ticket.record_id);
+        const emittedAt = at;
+        const latencyMs = observedLatencyMs;
+        try {
+            let quotaGate;
+            let sessionVersion = null;
+            if (resumeGate.kind === "quota") {
+                const session = captured.sessions.read(resumeGate.session_id);
+                if (session.state !== "parked")
+                    throw new Error("quota-parked ticket session is not parked");
+                sessionVersion = session.version;
+                quotaGate = captured.quota.latestFreshGate({
+                    roleId: resumeGate.role_id,
+                    engine: resumeGate.engine,
+                    sessionId: resumeGate.session_id,
+                    sessionVersion: session.version,
+                    checkedAt: at,
+                });
+                if (!quotaGate || Date.parse(quotaGate.observed_at) <= Date.parse(resumeGate.limited_observed_at)) {
+                    quotaBlocked.push(ticket.record_id);
+                    continue;
+                }
+                assertQuotaSourceProjected(captured.outbox, captured.quota, quotaGate.observation);
+            }
+            const published = captured.bus.publish("ticket-resume-due", {
+                sourceId: ticket.record_id,
+                sourceVersion: ticket.version,
+                dedupeKey: createStableId("resume", String(ticket.version), quotaGate?.observation.observation_id ?? "time", emittedAt),
+                occurredAt: emittedAt,
+            }, {
+                ticket_id: ticket.record_id,
+                ticket_version: ticket.version,
+                ticket_attempt: ticket.attempt,
+                ticket_actor: ticket.actor,
+                ticket_lease_token: ticket.lease_token,
+                role_id: resumeGate.kind === "quota" ? resumeGate.role_id : null,
+                quota_observation: quotaGate?.observation ?? null,
+                session_version: sessionVersion,
+                due_at: dueAt,
+                emitted_at: emittedAt,
+                latency_ms: latencyMs,
+                policy_digest: ticket.payload.policy_digest,
+            });
+            emitted.push(published.event.event_id);
+            try {
+                await processResumeEvent(published.event, at, captured);
+                processed.push(published.event.event_id);
+            }
+            catch {
+                failedEvents.push(published.event.event_id);
+            }
+        }
+        catch {
+            failedTickets.push(ticket.record_id);
+        }
+    }
+    return Object.freeze({
+        at,
+        emitted_event_ids: Object.freeze(emitted),
+        processed_event_ids: Object.freeze(processed),
+        quota_blocked_ticket_ids: Object.freeze(quotaBlocked),
+        overdue_ticket_ids: Object.freeze(uniqueSorted(overdue)),
+        failed_event_ids: Object.freeze(uniqueSorted(failedEvents)),
+        superseded_event_ids: Object.freeze(uniqueSorted(supersededEvents)),
+        failed_ticket_ids: Object.freeze(uniqueSorted(failedTickets)),
+        audit_conflict_run_ids: Object.freeze(uniqueSorted(auditConflicts)),
+    });
+}
+function compareNativeHookEvents(left, right) {
+    return left.payload.session_id.localeCompare(right.payload.session_id)
+        || left.payload.session_version - right.payload.session_version
+        || left.payload.observed_at.localeCompare(right.payload.observed_at)
+        || Number(right.payload.hook_kind === "session-started") - Number(left.payload.hook_kind === "session-started")
+        || left.event_id.localeCompare(right.event_id);
+}
+async function acknowledgeHeartbeatSuperseded(event, processedAt, processor) {
+    return processor.processOne({
+        eventId: event.event_id,
+        consumerId: HEARTBEAT_CONSUMER,
+        processedAt,
+    }, () => ({
+        action: "run-heartbeat-superseded",
+        expected_head_sha256: event.payload.expected_head_sha256,
+    }));
+}
+function heartbeatEventIsSuperseded(event, ledger) {
+    const head = ledger.head(event.payload.run_id);
+    return head === undefined || head.sha256 !== event.payload.expected_head_sha256;
+}
+async function processHeartbeatEvent(event, processedAt, runtime) {
+    return runtime.processor.processOne({
+        eventId: event.event_id,
+        consumerId: HEARTBEAT_CONSUMER,
+        processedAt,
+    }, (_storedEvent, context) => {
+        return withRunControllerAuthority(runtime.stateRoot, () => {
+            const manifest = readRunManifest(runtime.packageRoot, runtime.stateRoot, event.payload.run_id);
+            assertRunCurrentAuthority(manifest, runtime.configRoot);
+            assertRunManifestLedgerBinding(runtime.auditLedger, manifest);
+            const replay = runtime.auditLedger.list(event.payload.run_id)
+                .find((entry) => entry.operation_id === context.operationNonce);
+            if (replay) {
+                if (replay.entry_kind !== "heartbeat")
+                    throw new Error("scheduled heartbeat operation conflicts with run history");
+                const currentHead = runtime.auditLedger.head(event.payload.run_id);
+                if (!currentHead)
+                    throw new Error("scheduled heartbeat replay lost its run head");
+                return {
+                    action: "run-heartbeat-recorded",
+                    run_id: replay.run_id,
+                    sequence: replay.sequence,
+                    head_sha256: currentHead.sha256,
+                };
+            }
+            const head = runtime.auditLedger.head(event.payload.run_id);
+            const preparedRestart = head === undefined
+                ? undefined
+                : runtime.auditLedger.read(head);
+            if (!head || (head.sha256 !== event.payload.expected_head_sha256
+                && !(preparedRestart !== undefined
+                    &&
+                        preparedRestart.entry_kind === "process-restarted"
+                    && preparedRestart.payload.next_operation_id === context.operationNonce))) {
+                throw new Error("scheduled run heartbeat head advanced before projection");
+            }
+            const appended = appendRunAuditEvent(runtime.auditLedger, {
+                runId: event.payload.run_id,
+                operationId: context.operationNonce,
+                entryKind: "heartbeat",
+                payload: {
+                    expected_head_sha256: event.payload.expected_head_sha256,
+                    scheduled_at: event.payload.emitted_at,
+                    source_event_id: event.event_id,
+                },
+            });
+            return {
+                action: "run-heartbeat-recorded",
+                run_id: appended.entry.run_id,
+                sequence: appended.entry.sequence,
+                head_sha256: appended.ref.sha256,
+            };
+        });
+    });
+}
+async function processResumeEvent(event, processedAt, runtime) {
+    return runtime.processor.processOne({
+        eventId: event.event_id,
+        consumerId: RESUME_CONSUMER,
+        processedAt,
+    }, (_storedEvent, context) => {
+        const current = runtime.queue.read(event.payload.ticket_id);
+        if (current.payload.policy_digest !== event.payload.policy_digest) {
+            throw new Error("resume event policy no longer matches the ticket");
+        }
+        let quotaGate;
+        let runBinding;
+        let resumedSessionVersion = null;
+        if (event.payload.quota_observation !== null) {
+            if (event.payload.role_id === null || event.payload.session_version === null) {
+                throw new Error("quota resume event lost its session or role binding");
+            }
+            const observation = runtime.quota.read(event.payload.quota_observation);
+            const initialTicket = current.state === "parked" && current.version === event.payload.ticket_version;
+            if (initialTicket && (Date.parse(processedAt) < Date.parse(observation.observed_at)
+                || Date.parse(processedAt) > Date.parse(observation.valid_until))) {
+                return {
+                    action: "ticket-resume-expired",
+                    ticket_id: event.payload.ticket_id,
+                    quota_observation_id: observation.observation_id,
+                };
+            }
+            quotaGate = runtime.quota.freshGate({
+                reference: event.payload.quota_observation,
+                roleId: observation.role_id,
+                engine: observation.engine,
+                sessionId: observation.session_id,
+                sessionVersion: event.payload.session_version,
+                checkedAt: event.payload.emitted_at,
+            });
+            assertQuotaSourceProjected(runtime.outbox, runtime.quota, quotaGate.observation);
+            if (event.payload.role_id !== quotaGate.role_id) {
+                throw new Error("quota resume event lost its session or role binding");
+            }
+            const session = runtime.sessions.read(quotaGate.session_id);
+            if (session.payload.ticket_id !== event.payload.ticket_id) {
+                throw new Error("quota resume session does not match its durable ticket");
+            }
+            if (session.payload.run_id !== null) {
+                assertRunTicketAdmission({
+                    packageRoot: runtime.packageRoot,
+                    configRoot: runtime.configRoot,
+                    stateRoot: runtime.stateRoot,
+                    runId: session.payload.run_id,
+                    ticket: current,
+                });
+                runBinding = Object.freeze({ runId: session.payload.run_id, sessionId: session.record_id });
+            }
+            const initialSession = session.state === "parked" && session.version === event.payload.session_version;
+            const replayedSession = session.state === "running"
+                && session.version === event.payload.session_version + 1
+                && session.payload.last_event_id === event.event_id;
+            if (!initialSession && !replayedSession)
+                throw new Error("quota resume session authority is stale");
+        }
+        else if (event.payload.role_id !== null || event.payload.session_version !== null) {
+            throw new Error("time resume event contains quota session authority");
+        }
+        const commit = () => {
+            if (runBinding !== undefined)
+                assertWritableAuditRun(runtime.auditLedger, runBinding.runId);
+            const resumed = runtime.lifecycle.resume({
+                ...expectedTicketMutation(event, context.operationNonce),
+                ...(quotaGate === undefined ? {} : { quotaGate }),
+            }).record;
+            if (quotaGate !== undefined) {
+                resumedSessionVersion = runtime.sessions.resume({
+                    sessionId: quotaGate.session_id,
+                    expectedVersion: event.payload.session_version,
+                    operationId: context.operationNonce,
+                    actorId: "oms-scheduler",
+                    eventId: event.event_id,
+                    observedAt: event.payload.emitted_at,
+                    heartbeatDeadlineAt: new Date(Date.parse(event.payload.emitted_at) + SESSION_HEARTBEAT_MS).toISOString(),
+                }).record.version;
+            }
+            if (runBinding !== undefined) {
+                appendRunAuditEvent(runtime.auditLedger, {
+                    runId: runBinding.runId,
+                    operationId: createStableId("run-audit", event.event_id, "quota-resumed"),
+                    entryKind: "quota-resumed",
+                    payload: {
+                        source_event_id: event.event_id,
+                        ticket_id: resumed.record_id,
+                        ticket_version: resumed.version,
+                        session_id: runBinding.sessionId,
+                        session_version: resumedSessionVersion,
+                        quota_observation_id: quotaGate?.observation.observation_id ?? null,
+                    },
+                });
+            }
+            return {
+                action: "ticket-resumed",
+                ticket_id: resumed.record_id,
+                ticket_version: resumed.version,
+                quota_observation_id: quotaGate?.observation.observation_id ?? null,
+            };
+        };
+        return runBinding === undefined
+            ? commit()
+            : withRunControllerAuthority(runtime.stateRoot, commit);
+    });
+}
+function assertQuotaSourceProjected(outbox, quota, reference) {
+    const observation = quota.read(reference);
+    if (observation.source_kind !== "native-hook" || observation.source_event_id === null) {
+        throw new Error("quota resume requires a native-hook source event");
+    }
+    if (!outbox.readReceipt(observation.source_event_id, "native-hook-projector")) {
+        throw new Error(`quota source hook projection is not committed: ${observation.source_event_id}`);
+    }
+}
+function assertWritableAuditRun(ledger, runId) {
+    const head = ledger.head(runId);
+    if (!head || ledger.deriveMetrics(head).status !== "running") {
+        throw new Error("run-bound scheduler event requires an active exact audit run");
+    }
+}
+function expectedTicketMutation(event, operationId) {
+    return {
+        ticketId: event.payload.ticket_id,
+        operationId,
+        ownerId: "oms-scheduler",
+        expectedVersion: event.payload.ticket_version,
+        expectedAttempt: event.payload.ticket_attempt,
+        expectedActor: event.payload.ticket_actor,
+        expectedLeaseToken: event.payload.ticket_lease_token,
+        at: event.payload.emitted_at,
+    };
+}
+function minuteBucket(value) {
+    const date = new Date(Date.parse(value));
+    date.setUTCSeconds(0, 0);
+    return date.toISOString();
+}
+function uniqueSorted(values) {
+    return [...new Set(values)].sort((left, right) => left.localeCompare(right));
+}
+//# sourceMappingURL=minute.js.map

package/dist/src/scheduler/minute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"minute.js","sourceRoot":"","sources":["../../../src/scheduler/minute.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EACL,2BAA2B,GAG5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,8BAA8B,EAC9B,wBAAwB,EACxB,eAAe,EACf,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAG7B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AACtD,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC7C,MAAM,qBAAqB,GAAG,EAAE,GAAG,KAAK,CAAC;AAczC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAYrC;IACC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,4BAA4B,CAAC,OAAO,CAAC,KAAK,CAAC;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1C,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,2BAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,MAAM,kBAAkB,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;SAClG,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC;gBACtB,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,WAAW,EAAE,EAAE;gBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YACjD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,IAAI,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5D,MAAM,8BAA8B,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACpE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAClF,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YACzD,8BAA8B,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,gBAAgB,KAAK,OAAO;gBAAE,OAAO,EAAE,CAAC;YAClD,OAAO,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACvG,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,cAAc,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5F,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,CAC1E,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE;gBAC1D,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM;gBACrC,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ;gBAC3C,SAAS,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBAC5C,UAAU,EAAE,MAAM;aACnB,EAAE;gBACD,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM;gBACnC,oBAAoB,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM;gBAChD,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC3D,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;SACjC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC;SAC7C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxF,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QAC1F,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,iBAAiB,GAAG,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,SAAqC,CAAC;YAC1C,IAAI,cAAc,GAAkB,IAAI,CAAC;YACzC,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC7F,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;gBACjC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC;oBACzC,MAAM,EAAE,UAAU,CAAC,OAAO;oBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,SAAS,EAAE,UAAU,CAAC,UAAU;oBAChC,cAAc,EAAE,OAAO,CAAC,OAAO;oBAC/B,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBAClG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACpC,SAAS;gBACX,CAAC;gBACD,0BAA0B,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE;gBAC1D,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,SAAS,EAAE,cAAc,CACvB,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EACtB,SAAS,EAAE,WAAW,CAAC,cAAc,IAAI,MAAM,EAC/C,SAAS,CACV;gBACD,UAAU,EAAE,SAAS;aACtB,EAAE;gBACD,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,OAAO;gBAC9B,cAAc,EAAE,MAAM,CAAC,OAAO;gBAC9B,YAAY,EAAE,MAAM,CAAC,KAAK;gBAC1B,kBAAkB,EAAE,MAAM,CAAC,WAAW;gBACtC,OAAO,EAAE,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;gBAChE,iBAAiB,EAAE,SAAS,EAAE,WAAW,IAAI,IAAI;gBACjD,eAAe,EAAE,cAAc;gBAC/B,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;aAC5C,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACxD,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACzC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7C,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACrD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3D,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACnE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC7D,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA8C,EAC9C,KAA+C;IAE/C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;WACjE,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe;WAC5D,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;WACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,iBAAiB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,iBAAiB,CAAC;WAC5G,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,KAA4C,EAC5C,WAAmB,EACnB,SAA0B;IAE1B,OAAO,SAAS,CAAC,UAAU,CAAC;QAC1B,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,UAAU,EAAE,kBAAkB;QAC9B,WAAW;KACZ,EAAE,GAAG,EAAE,CAAC,CAAC;QACR,MAAM,EAAE,0BAA0B;QAClC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB;KACzD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,0BAA0B,CACjC,KAA4C,EAC5C,MAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,KAA4C,EAC5C,WAAmB,EACnB,OAMC;IAED,OAAO,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,UAAU,EAAE,kBAAkB;QAC9B,WAAW;KACZ,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE;QAC3B,OAAO,0BAA0B,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE;YACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/F,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACxD,8BAA8B,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;iBAC1D,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACnH,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnE,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClF,OAAO;oBACL,MAAM,EAAE,wBAAwB;oBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,WAAW,CAAC,MAAM;iBAChC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,eAAe,GAAG,IAAI,KAAK,SAAS;gBACxC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,IAAI,CACX,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,oBAAoB;mBAC/C,CAAC,CACF,eAAe,KAAK,SAAS;;wBAE7B,eAAe,CAAC,UAAU,KAAK,mBAAmB;uBAC/C,eAAe,CAAC,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,cAAc,CACxE,CACF,EAAE,CAAC;gBACF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE;gBACxD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;gBAC3B,WAAW,EAAE,OAAO,CAAC,cAAc;gBACnC,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE;oBACP,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB;oBACxD,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;oBACtC,eAAe,EAAE,KAAK,CAAC,QAAQ;iBAChC;aACF,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,wBAAwB;gBAChC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;gBACjC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM;aACjC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAA4C,EAC5C,WAAmB,EACnB,OAWC;IAED,OAAO,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,UAAU,EAAE,eAAe;QAC3B,WAAW;KACZ,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,SAAqC,CAAC;QAC1C,IAAI,UAAsE,CAAC;QAC3E,IAAI,qBAAqB,GAAkB,IAAI,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACxE,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YACrG,IAAI,aAAa,IAAI,CACnB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC;mBAC1D,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CACjE,EAAE,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,uBAAuB;oBAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;oBAClC,oBAAoB,EAAE,WAAW,CAAC,cAAc;iBACjD,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO;gBAC3B,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS,EAAE,WAAW,CAAC,UAAU;gBACjC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;gBAC7C,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;aACpC,CAAC,CAAC;YACH,0BAA0B,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YACjF,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpC,wBAAwB,CAAC;oBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;oBAC7B,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;YACvG,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS;mBAC9C,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC;mBACrD,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC;YACtD,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACtG,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,UAAU,KAAK,SAAS;gBAAE,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;gBACvC,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC;gBACxD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,CAAC,CAAC,MAAM,CAAC;YACV,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC9C,SAAS,EAAE,SAAS,CAAC,UAAU;oBAC/B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAgB;oBAC/C,WAAW,EAAE,OAAO,CAAC,cAAc;oBACnC,OAAO,EAAE,eAAe;oBACxB,OAAO,EAAE,KAAK,CAAC,QAAQ;oBACvB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;oBACpC,mBAAmB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,oBAAoB,CAAC,CAAC,WAAW,EAAE;iBACzG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC;YACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE;oBACvC,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC;oBACzE,SAAS,EAAE,eAAe;oBAC1B,OAAO,EAAE;wBACP,eAAe,EAAE,KAAK,CAAC,QAAQ;wBAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,cAAc,EAAE,OAAO,CAAC,OAAO;wBAC/B,UAAU,EAAE,UAAU,CAAC,SAAS;wBAChC,eAAe,EAAE,qBAAqB;wBACtC,oBAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,cAAc,IAAI,IAAI;qBACpE;iBACF,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,OAAO;gBAC/B,oBAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,cAAc,IAAI,IAAI;aACpE,CAAC;QACJ,CAAC,CAAC;QACF,OAAO,UAAU,KAAK,SAAS;YAC7B,CAAC,CAAC,MAAM,EAAE;YACV,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAmB,EACnB,KAA4B,EAC5B,SAAwC;IAExC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,WAAW,CAAC,WAAW,KAAK,aAAa,IAAI,WAAW,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,eAAe,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsB,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA4C,EAC5C,WAAmB;IAEnB,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QACjC,WAAW;QACX,OAAO,EAAE,eAAe;QACxB,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QAC7C,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QAC7C,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QACzC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QACpD,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/src/schemas/registry.d.ts

@@ -0,0 +1,10 @@
+import type { EvidenceSchema } from "../domain/role-policy.js";
+import { type JsonSchemaNode } from "../runtime/schema.js";
+export interface RegisteredSchema {
+    id: EvidenceSchema;
+    path: string;
+    schema: JsonSchemaNode;
+}
+export declare function registeredSchema(id: EvidenceSchema, packageRoot?: string): RegisteredSchema;
+export declare function registeredSchemaIds(): EvidenceSchema[];
+export declare function parseStructuredOutput(id: EvidenceSchema, raw: string, packageRoot?: string): unknown;

package/dist/src/schemas/registry.js

@@ -0,0 +1,36 @@
+import { lstatSync } from "node:fs";
+import { join } from "node:path";
+import { findPackageRoot } from "../package-root.js";
+import { assertSchema, loadJsonSchema } from "../runtime/schema.js";
+const SCHEMA_FILES = {
+    "conductor-decision.v1": "conductor-decision.schema.json",
+    "advisor-output.v1": "advisor-output.schema.json",
+    "executor-result.v1": "executor-result.schema.json",
+    "goal-executor-result.v1": "goal-executor-result.schema.json",
+    "grader-output.v1": "grader-output.schema.json",
+    "reflection.v1": "reflection.schema.json",
+};
+export function registeredSchema(id, packageRoot = findPackageRoot()) {
+    const path = join(packageRoot, "schemas", SCHEMA_FILES[id]);
+    const entry = lstatSync(path);
+    if (entry.isSymbolicLink() || !entry.isFile())
+        throw new Error(`unsafe registered schema: ${id}`);
+    return { id, path, schema: loadJsonSchema(path) };
+}
+export function registeredSchemaIds() {
+    return Object.keys(SCHEMA_FILES);
+}
+export function parseStructuredOutput(id, raw, packageRoot = findPackageRoot()) {
+    if (raw.trim().length === 0)
+        throw new Error(`empty structured output for ${id}`);
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new Error(`malformed structured output for ${id}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    assertSchema(value, registeredSchema(id, packageRoot).schema, id);
+    return value;
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/schemas/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/schemas/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAEzF,MAAM,YAAY,GAAmC;IACnD,uBAAuB,EAAE,gCAAgC;IACzD,mBAAmB,EAAE,4BAA4B;IACjD,oBAAoB,EAAE,6BAA6B;IACnD,yBAAyB,EAAE,kCAAkC;IAC7D,kBAAkB,EAAE,2BAA2B;IAC/C,eAAe,EAAE,wBAAwB;CAC1C,CAAC;AAQF,MAAM,UAAU,gBAAgB,CAAC,EAAkB,EAAE,WAAW,GAAG,eAAe,EAAE;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAqB,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAkB,EAAE,GAAW,EAAE,WAAW,GAAG,eAAe,EAAE;IACpG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtH,CAAC;IACD,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/security/secret-scan.d.ts

@@ -0,0 +1,50 @@
+import { type ProcessRunner } from "../providers/process.js";
+export interface SecretScanReference {
+    readonly scan_id: string;
+    readonly sha256: string;
+    readonly file_name: string;
+}
+export interface SecretScanResult {
+    readonly schema_version: 1;
+    readonly scan_id: string;
+    readonly ticket_id: string;
+    readonly phase: "preflight" | "final";
+    readonly scanner: "gitleaks";
+    readonly scanner_version: string;
+    readonly configuration_sha256: string;
+    readonly base_commit: string;
+    readonly verified_commit: string;
+    readonly scopes: readonly Readonly<{
+        scope: "commit-range" | "tracked-worktree" | "evidence" | "outbound";
+        input_sha256: string;
+        argv_sha256: string;
+        passed: boolean;
+    }>[];
+    readonly passed: boolean;
+    readonly created_at: string;
+}
+export interface SecretScanPolicy {
+    readonly schema_version: 1;
+    readonly scanner: "gitleaks";
+    readonly version: string;
+    readonly configuration: "builtin-default";
+    readonly redaction_percent: 100;
+}
+export declare function runSecretScan(options: {
+    readonly packageRoot?: string;
+    readonly stateRoot: string;
+    readonly ticketId: string;
+    readonly phase: "preflight" | "final";
+    readonly worktreeRoot: string;
+    readonly baseCommit: string;
+    readonly verifiedCommit: string;
+    readonly outbound: unknown;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly runner?: ProcessRunner;
+    readonly clock?: () => string;
+}): Readonly<{
+    reference: SecretScanReference;
+    result: SecretScanResult;
+}>;
+export declare function readSecretScan(stateRoot: string, reference: SecretScanReference): SecretScanResult;
+export declare function readSecretScanPolicy(packageRoot: string): SecretScanPolicy;